ET replied on Wed, Jun 17 2009 5:23 AM

rated by 0 users

Hi,

I know it's maybe stupid question, but have you set up your routers to export Netflow information? e.g. How to Configure Netflow >>

Do you have some warnings in resource "Last 25 Traffic Analysis Events", that NTA collector discarded netflow stream from these nodes? If so, there should be also reason, why we did this.

Thanks

kweise replied on Wed, Jun 17 2009 6:45 AM

rated by 0 users

pokengx,

A couple of other things you might want to check.  First, make sure the SolarWinds NetFlow Service is running on your Orion server.  Also, make sure that you are monitoring all of the interfaces you want NetFlow data from in Orion.  Finally, make sure in your ip flow export statement that you are sending your Netflow data to the correct port.  By default, the Orion NTA module listens for Netflow data on port 2055.  You can check the status of your collector service by logging in as admin and going to Admin | NTA Settings | NetFlow Collector Services.  This will show you the server name of your collector, the status of your receiver and the port the server is listening on for Netflow data.

If everything checks out, you might want to install a packet capture program on your Orion server and verify the Netflow data is reaching your server.  I have Wireshark running on the Orion server that is running the Netflow service.

Hope this helps!

pokengx replied on Wed, Jun 17 2009 10:35 AM

rated by 0 users

thank guys ;)

i didn't know that we need to set the interface to export any statement to the NTA first.. i thought that NTA also using SNMP